Verify an evidence bundle

Upload a .dsr-bundle.zip file. We'll check the manifest signature against the Déjà Ed25519 key that was in service on the manifest's issue date, current or retired, and surface the bundle contents. No login required, no upload retained.